Security

Plain answers about how your billing data is handled — written for both business owners and their IT teams.

Payments — we never touch the money

All online payments run through Stripe, the payments provider used by millions of businesses. Card and bank account numbers are entered on Stripe's secure pages and never touch BillBetter.AI's servers. Payments travel directly from the payer to the payee's own Stripe account — BillBetter.AI never holds, pools, or has custody of funds at any point.

Where your data lives

BillBetter.AI runs on Render, a US cloud platform, with data stored in a managed PostgreSQL database. All traffic between your browser and our servers is encrypted with TLS (the padlock in your browser). Bill documents you upload are stored on our servers and are only visible to you and the people you've explicitly shared them with.

Signing in and who sees what

• Passwords are stored using industry-standard bcrypt hashing — we cannot read them.
• Optional two-step sign-in adds an emailed code on every login.
• Sign in with Microsoft is available, so companies can use their existing Microsoft accounts.
• Teams use role-based permissions — view only, make changes, or co-owner — and folder-specific teammates see only the folder they're invited to.
• Private notes on a bill are never shown to the other party unless you explicitly share them.

Email intake (optional)

Linking a mailbox is optional and started only by you. Microsoft 365 mailboxes connect through Microsoft's own sign-in (OAuth) — you never give us your password. Other mailboxes connect over IMAP, where we recommend an app-specific password. Access is read-only: we scan incoming mail for bills and never send, delete, or modify your email. Unlinking a mailbox in the app immediately removes our access and deletes the stored connection.

AI document reading

When you upload a bill, its content is sent to Anthropic's Claude API solely to read out the vendor, amount, dates, and line items. Under Anthropic's commercial API terms, this data is not used to train AI models.

Your data is yours

Export your bills and reports as CSV or PDF at any time. Bills and folders you created can be deleted from the app. For full account deletion, email us and we'll remove your account and its data.

Subprocessors

Reporting a security concern

Found something that doesn't look right? Email support@billbetter.ai — security reports go to the top of the pile, and we'll respond quickly.